fdaaeadd9cf0f32f3710e922944b8ce8066d76e36d3605defe6c69d47324f514 | Triage

Sharing

General

Target

2024-09-21_eed29953092506ca16fba6eef71f2867_cryptolocker
Size

52KB
Sample

240921-c3xx6a1erj
MD5

eed29953092506ca16fba6eef71f2867
SHA1

bb44a392e3e88d1c450e6d3f8497f915ba1aeb1e
SHA256

fdaaeadd9cf0f32f3710e922944b8ce8066d76e36d3605defe6c69d47324f514
SHA512

94424bcc3c78e9e7910c3421dff03bd2b77248a93f21bec9601e16f33ae560ac4f2c2c33d8a3355e075280b8a2d0dfd1723d0fdbb8e3e7e3562794586c377275
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAIXa6gK:aq7tdgI2MyzNORQtOflIwoHNV2XBFV70

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-21_eed29953092506ca16fba6eef71f2867_cryptolocker
- Size
  
  52KB
- MD5
  
  eed29953092506ca16fba6eef71f2867
- SHA1
  
  bb44a392e3e88d1c450e6d3f8497f915ba1aeb1e
- SHA256
  
  fdaaeadd9cf0f32f3710e922944b8ce8066d76e36d3605defe6c69d47324f514
- SHA512
  
  94424bcc3c78e9e7910c3421dff03bd2b77248a93f21bec9601e16f33ae560ac4f2c2c33d8a3355e075280b8a2d0dfd1723d0fdbb8e3e7e3562794586c377275
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAIXa6gK:aq7tdgI2MyzNORQtOflIwoHNV2XBFV70
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2